Manager-Data Privacy & Grievance Officer

Role & responsibilities

Data Privacy & DPDP Compliance

• Ensure implementation and continuous monitoring of the organizations data privacy framework.
• Drive compliance with:
• Digital Personal Data Protection (DPDP) Act, 2023
• Applicable privacy and data protection regulations
• Internal privacy governance standards
• Draft, review, and update:
• Privacy policies
• Consent notices
• Data retention policies
• Vendor privacy clauses
• Data processing agreements
• Advise departments on lawful collection, processing, storage, sharing, and retention of personal data.
• Maintain records related to personal data processing and privacy compliance.
• Support privacy impact assessments and privacy-by-design initiatives.
• Coordinate with internal stakeholders for implementation of privacy controls and SOPs.

Grievance Officer Responsibilities

• Act as the designated Grievance Officer under the DPDP Act.
• Handle and resolve grievances raised by Data Principals regarding:
• Consent withdrawal
• Data correction/update requests
• Data erasure requests
• Access requests
• Privacy complaints
• Unauthorized data processing concerns
• Ensure grievances are acknowledged and resolved within prescribed timelines.
• Maintain grievance registers, audit trails, and complaint records.
• Coordinate with Legal, HR, IT, Security, and Operations teams for investigation and closure of complaints.
• Escalate high-risk privacy matters and breaches to senior management.Monthly Compliance & Regulatory Monitoring
• Manage monthly legal and compliance tracking activities.
• Monitor and circulate:
• Government notifications
• Regulatory amendments
• Compliance updates
• Industry advisories relating to privacy and legal compliance
• Prepare periodic compliance reports and dashboards for management.
• Ensure timely filing, documentation, and closure of compliance obligations.Legal & Contractual Support
• Provide legal support on commercial and operational matters.
• Draft, review, and negotiate various agreements.
• Support internal legal documentation and contract management processes.
• Assist in handling notices, disputes, investigations, and regulatory inquiries.
• Coordinate with external legal counsel where required.

Governance & Risk Management

• Develop and strengthen compliance frameworks, SOPs, and governance mechanisms.
• Conduct risk assessments related to privacy and legal exposure.
• Support internal audits and compliance reviews.
• Conduct employee awareness sessions and privacy trainings.
• Assist management in identifying and mitigating regulatory and operational risks.

Preferred candidate profile

Strong understanding of:

• DPDP Act, 2023
• Data privacy principles
• Contract law and compliance management
• Legal drafting and documentation

• Excellent communication and stakeholder management skills

• Strong analytical, investigation, and risk assessment abilities

• Knowledge of cybersecurity and data governance practices

• Ability to manage cross-functional coordination and regulatory compliance activities